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DETAILED ACTION 

Claim Rejections - 35 USC § 102 

1. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this Office 
action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 3-4, 7-9, 13, and 22 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Baba (US 5,987, 129). 

a. Referring to claim 3: 
i. Baba teaches: 

(1) a cryptographic, communications method for 
communications of information between entities wherein a plurality of centers are 
provided, each of which generates secret keys peculiar to the entities using divided 
pieces of information resulting from division of information specifying each of the 
entities; one entity generates a first common key using a first component contained in at 
least one secret generated by at least one of the plurality of centers, the secret key 
being peculiar to the one entity, encrypts plaintext to ciphertext using the first common 
key and sends the ciphertext to another entity, the first component corresponding to one 
or more of the divided pieces of information specifying said another entity; and said 
another entity generates a second common key identical to the first common key using 
a second component contained in secret keys peculiar to the another entity sent from 
said centers, and decrypts said ciphertext to the original plaintext using the second 
common key, the second component corresponding to one or more of the divided 
pieces of information specifying the one entity [i.e., as shown in Figure 1, a the 
cryptosystem includes a center or central facility 1, which is a basic main 
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constituent of the system, a plurality of entities 2 which are subscribed to the 
cryptosystem for communication with each other, and a network 3 such as the 
Internet, a personal computer communication network, or the like through which 
the center 1 and the entities 2 are connected to communicate with each other. 
The center 1 and the entities 2 include computers such as personal computers for 
effecting actual communications and data processing and users of those 
computers. In the cryptosystem on the network 3, as shown in Figure 2, the 
entities 2 (represented by i, j, . . . in Figure 2) have respective peculiar identifiers 
yi, yj, . . . (described in detail later on). If i.noteq.j, then yi.noteq.yj. The entities 2 
(i, j, . . . ) have been given, by the center 1, respective secret private keys Xi, Xj, . 
. . (described in detail later on and hereinafter referred to as a "secret private key 
Xn" if necessary) which are peculiar to the respective entities 2 and generated by 
the center 1 based on the respective identifiers yi, yj, . . . (hereinafter referred to 
as an "identifier yn" if necessary). For cryptographic communications between 
any arbitrary entities i, j, a common cryptokey Kij for encrypting communication 
data (on the transmitting side) and decrypting communication data (on the 
receiving side) is generated for the entities i, j using the secrete private keys Xi, 
Xj of the entities i, j. Using the generated common cryptokey Kij, the encrypted 
communications are carried out between the entities i, j. The cryptosystem for 
carrying out the above cryptographic communications described in detail with 
reference to Figures 3 through 8 (column 8, lines 66-67 through column 12, lines 
34)]. In addition, if there are a plurality of centers, then "xi" in the equation 
Vi(.eta.)=xi.multidot.f.eta.is replaced with the summation of the matrix xi 
determined as described above for each of the centers (column 16, lines 8-10)]. 

b. Referring to claim 4: 

i. This claim has limitations that is similar to those of claim 3, 
thus it is rejected with the same rationale applied against claim 3 above. 

c. Referring to claim 7: 
i. Baba teaches: 
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(1) storage means at each entity for storing secret keys 
peculiar to each respective entity produced for respective pieces of information resulting 
from division of information specifying each of said respective entities [i.e., referring to 
Figure 1, When each entity 2 receives the secret private key Xn and the identifier 
transformation algorithm, it stores them secretly in a suitable storage device of 
its own computer (column 10, lines 14-16)]; 

(2) selection means for selecting components 
corresponding to pieces of information specifying opposite entities to be communicated 
with, from among the secret keys stored; and means for generating said common keys 
using said components so selected [I.e., in the cryptosystem, the secret private key 
of each entity 2 is generated and a common cryptokey is generated according to 
a linear transformation or scheme. It is assumed that Xif represents the secret 
private key of an entity i for the generation of a common cryptokey shared by f 
entities 2. According to a general concept for constructing the above linear 
scheme, that is "selection", an f-input symmetric transformation g (which is a 
symmetric function having f variables) is arbitrarily selected (column 15, lines 12- 
20)]. 

d. Referrinp to claim 8: 
i. Baba teaches: 

(1) a plurality of centers that generate secret keys 
peculiar to said entities using pieces of information resulting from division of information 
specifying each of said entities and that sends said secret keys to said entities [i.e., 
referring to Figure 3, generating, in the center, that could be a plurality of centers 
(see columnie, line 8) , a secret private key peculiar to each of the entities by 
transforming an identifier which is peculiar to each of the entities and which is 
public, according to a center algorithm which is held by the center only and 
common to the entities and which includes at least an integral transformation 
algorithm, and distributing, from the center, the secret private key and the 
integral transformation algorithm to each of the entities (column 2, lines 50-57)]; 
and 
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(2) a plurality of entities each of which generates a 
common key employed mutually in said encryption and decryption processing when 
communicating with another entity, using a component corresponding to a divided 
specified information to each entity,contained in own secret key sent from the centers, 
the component corresponding to one or more pieces of information specifying said 
another entity [i.e., a method of sharing a common cryptokey for encrypting and 
decrypting communication data between entities in a network which includes a 
plurality of entities and a center, comprising the steps of generating, in the 
center, a secret private key peculiar to each of the entities by transforming an 
identifier which is peculiar to each of the entities and which is public, according 
to a center algorithm which is held by the center only and common to the entities 
and which includes at least an integral transformation algorithm, and distributing, 
from the center, the secret private key and the integral transformation algorithm 
to each of the entities, and when the entities communicate with each other, 
applying, in each of the entities, the integral transformation algorithm and the 
secret private key which are possessed by each of the entities to the identifier of 
the other entity thereby to generate a common cryptokey, so that the entities will 
possess the common cryptokey shared by the entities (column 2, lines 46-63)]. 
e. Referring to claim 9: 
i. Baba teaches: 

(1) a computer readable recording medium that stores a 
program that generates at entities involved in communications common keys used in 
processing to encrypt plaintext to ciphertext and in processing to decrypt said ciphertext 
to said plaintext in a cryptographic communications system, comprising: first program 
code means for causing said computer to select a component corresponding to one or 
more of divided pieces of information specifying one entity from a secret key peculiar to 
another entity; and second program code means for causing said computer to generate 
said common keys using said components selected [i.e., as shown in Fligure 8, the 
computer of each of the entities 2 comprises a keyboard 4, a main unit 5 made up 
of a CPU, a RAM, a ROM, etc., and a data base 6 comprising a hard disk, that is "a 
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computer readable recording medium", or the like for storing the secret private 
key xn, the identifier transformation algorithm, plaintexts such as sentences, 
programs (which can include "first program code and second program code"), 
etc., and encrypted communication texts (column 12, lines 19-25)]. 

f. Ref erring to claim 13: 

i. This claim has limitations that is similar to those of claims 3, 
thus it is rejected with the same rationale applied against claims 3 above. 

g. Referring to claim 22: 

i. This claim has limitations that is similar to those of claim 9, 
thus it is rejected with the same rationale applied against claim 9 above. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 5-6, 14-21, and 23 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Baba (US 5,987, 129). 

a. Referring to claims 5 and 6: 

i. Baba does not explicitly teaches: 

(1) wherein computation formulas for generating secret 

keys at said centers. 

(2) wherein computation formulas for generating common 

keys at said entities. 

ii. However, Baba does imply: 

(1) as shown in Figure 3, cryptographic communications 
are carried out between the entities i, j after the center 1 generates and distributes the 
secret private key Xn in a preparatory stage. In the preparatory stage, the center 1 
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generates a center algorithm, that is "computation formulas", which serves as a basis 
for generating the secret private key Xn of each entity when the center 1 is established 
or the cryptosystem is updated (step 1) (column 7, lines 62-67 through column 8, 
lines 1-2). 

(2) referring back to Figure 3, when the entities 2 (i, j, . . . 
) are subscribed to the cryptosystem, the center 1 generates a secret private key Xn 
peculiar to each of the entities 2 and an identifier transformation algorithm, that is 
"computation formulas" for generating a common cryptokey Kij (column 8, lines 66-67 
through column 9, lines 1-3)]. 

iii. It would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to: 

(1) fully define by an expression containing mathematical 
function/formulas as in the center algorithm and identifier transformation algorithm of 
Baba. 

iv. The ordinary skilled person would have been motivated to: 
(1) fully reveal or express containing mathematical 

function/formulas about the generation of secret key and common key as shown in 
Figure 3 of Baba, a flowchart of an operation sequence of the cryptosystem shown in 
Figure 1 of Baba. 

b. Referring to claim 14: 

i. This claim has limitations that is similar to those of claims 5, 
thus it is rejected with the same rationale applied against claims 5 above. 

c. Referring to claim 1 5: 

i. This claim has limitations that is similar to those of claims 5, 
thus it is rejected with the same rationale applied against claims 5 above. 

d. Referring to claims 16 and 18: 

i. These claims have limitations that is similar to those of claim 
6, thus they are rejected with the same rationale applied against claim 6 above. 

e. Referring to claim 1 7: 
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i. This claim has limitations that is similar to those of claims 3 
and 5, thus it is rejected with the same rationale applied against claims 3 and 5 above. 

f. Referrinp to claim 19: 
i. Baba teaches: 

(1) a common key generator provided at entities in a 
cryptographic communications system for generating a common key to be used in 
processing to encrypt plaintext to ciphertext and in processing to decrypt ciphertext 
back to plaintext [i.e., referring to Figure 8, the main unit 5 includes as its functions 
a common l<ey generator 7 for generating a common key, an encrypting and 
decrypting processor 8 for encrypting and decrypting communication data 
(column 12, lines 25-28)], comprising: 

(2) This claim also has limitations that is similar to those 
of claims 6 and 7, thus it is rejected with the same rationale applied against claims 6 
and 7 above. 

g. Referring to claim 20: 

i. This claim has limitations that is similar to those of claims 6 
and 8, thus it is rejected with the same rationale applied against claims 6 and 8 above. 

h. Referring to claim 21: 

i. This claim has limitations that is similar to those of claims 6 
and 9, thus it is rejected with the same rationale applied against claims 6 and 9 above. 

i. Referring to claim 23: 

i. This claim has limitations that is similar to those of claims 6 
and 9, thus it is rejected with the same rationale applied against claims 6 and 9 above. 

Response to Argument 
5. Applicant's arguments filed February 23, 2004 have been fully considered 
but they are not persuasive. 

Applicant argues that: 

"Although the Baba reference discusses a plurality of centers, the Baba 
reference does not allow for each of the centers to generate secret keys, such that a 
specific center does not have to have all of the secret keys. The divided information 



Application/Control Number: 09/489.696 Page 9 

Art Unit: 2135 

used to generate each of the secret keys at each of the centers allows for a diminished 
size of the secret key. Further, Baba does not teach nor suggest that each entity 
generates a common key by using a component of the secret key corresponding to the 
divided information corresponding to another entity as recited in the claims of the 
present invention." 

Examiner still maintains that: 

Baba does teach the claimed subject matter. In addition, Baba further 
teaches a center or central facility established on the network generates a secret private 
key for each of the entities for generating a common cryptokey and distributes the 
generated secret private key to each of the entities. When the entities communicate 
with each other, each of the entities applies its own secret private key to the other 
entity's identifier (name, address, or the like), generating a common cryptokey shared 
by the entities (column 1 , line 40 through column 2, line 5). In fact, the applicant has 
agreed that the prior art teaches the plurality of centers. However, the applicant argues 
that "the divided information used to generate each of the secret keys at each of the 
centers allows for a diminished size of the secret key", in which the limitation does not 
even address in the claim language as set forth in ail the independent claims. 

Conclusion 

6. Applicant's amendment necessitated the new ground(s) of rejection 
presented in this Office action. Accordingly. THIS ACTION IS MADE FINAL. See 
MPEP § 706.07(a). Applicant is reminded of the extension of time policy as set forth in 
37 CFR 1.136(a). 



A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event a first reply is 
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filed within TWO MONTHS of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened statutory period, then 
the shortened statutory period will expire on the date the advisory action is mailed, and 
any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date 
of the advisory action. In no event, however, will the statutory period for reply expire 
later than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thanhnga (Tanya) Truong 
whose telephone number is 571-272-3858. 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax and 
phone numbers for the organization where this application or proceeding is assigned is 
703-872-9306. 

Any inquiry of a general nature or relating to the status of this 
application or proceeding should be directed to the receptionist whose telephone 
number is 571-272-2100. 




TBT C7 
November 30, 2004 ^"vS .^^^ 



